CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter()

Security readout for executives and security teams

A flaw in the Linux kernel's real-time mutex code could let a logged-in user crash the system or gain higher privileges. It affects a specific locking helper used during futex operations. Attackers need local access, and fixed kernels have been published on kernel.org, so the priority is patching internal Linux hosts on a normal cadence. Any Linux system running affected 6.1, 6.6, 6.12, 6.18, or 7.x kernel lines is exposed. The bug is reachable from user space through futex_requeue, so shared hosts, multi-tenant nodes, and workstations with untrusted local users carry the most risk. Fully patched stable branches (6.1.175, 6.6.140, 6.12.86, 6.18.27, 7.0.4, 7.1) are unaffected. Treat as a standard high-severity Linux kernel patch cycle. It is not a fire drill, but leaving it unpatched on shared or developer-facing Linux systems raises the risk of a local user escalating privileges. Fold into the next scheduled kernel maintenance window and confirm coverage across servers, containers hosts, and Linux endpoints. Mitigation focus: Upgrade to Linux stable 6.1.175, 6.6.140, 6.12.86, 6.18.27, 7.0.4, or 7.1 or later.; Track distribution kernel advisories and apply vendor-backported rtmutex fixes when available.; Restrict untrusted local accounts and container escape paths on shared Linux hosts until patched..

Prepared

Jul 11, 2026, 06:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.